dbus/cmake
Simon McVittie d9ab893182 Security hardening: force EXTERNAL auth in session.conf on Unix
DBUS_COOKIE_SHA1 is dependent on unguessable strings, i.e.
indirectly dependent on high-quality pseudo-random numbers
whereas EXTERNAL authentication (credentials-passing)
is mediated by the kernel and cannot be faked.

On Windows, EXTERNAL authentication is not available,
so we continue to use the hard-coded default (all
authentication mechanisms are tried).

Users of tcp: or nonce-tcp: on Unix will have to comment
this out, but they would have had to use a special
configuration anyway (to set the listening address),
and the tcp: and nonce-tcp: transports are inherently
insecure unless special steps are taken to have them
restricted to a VPN or SSH tunnelling.

Users of obscure Unix platforms (those that trigger
the warning "Socket credentials not supported on this Unix OS"
when compiling dbus-sysdeps-unix.c) might also have to
comment this out, or preferably provide a tested patch
to enable credentials-passing on that OS.

Bug: https://bugs.freedesktop.org/show_bug.cgi?id=90414
2015-05-12 11:54:50 +01:00
..
bus Rename bus-test-launch-helper to test-bus-launch_helper to match common test application naming scheme. 2014-01-17 16:29:37 +00:00
dbus Rename dbus-test to test-dbus to match common test application naming scheme. 2014-01-17 16:17:02 +00:00
doc Use Doxyfile.in for cmake build system too. 2013-06-24 14:39:01 +02:00
modules Give cmake users some hints/requirements when cross compiling for Windows on Linux. 2014-01-21 21:09:55 +01:00
test Add manual tcp test case. 2015-04-15 12:19:57 +02:00
tools Remove obsolete cmake project tags in sub directories; we only have one project. 2014-01-08 01:35:49 +01:00
bus-test.bat.cmake * cmake: new directory, contains cmake build support. 2007-03-03 14:32:17 +00:00
CMakeLists.txt Security hardening: force EXTERNAL auth in session.conf on Unix 2015-05-12 11:54:50 +01:00
config.h.cmake Fix of 'dbus-daemon can only handle 64 simultaneous connections on Windows'. 2015-01-05 11:47:02 +01:00
ConfigureChecks.cmake CMake warning--. 2014-01-17 12:09:33 +01:00
dbus-env.bat.cmake Split DBUS_SESSION_BUS_DEFAULT_ADDRESS into listen, connect addresses and set better defaults 2012-08-13 19:57:13 +01:00